Vulnerability Details CVE-2013-7351
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://seclists.org/oss-sec/2014/q2/1
- http://seclists.org/oss-sec/2014/q2/4
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92215
- https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925a
- https://github.com/sebsauvage/Shaarli/issues/134
- http://seclists.org/oss-sec/2014/q2/1
- http://seclists.org/oss-sec/2014/q2/4
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92215
- https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925a
- https://github.com/sebsauvage/Shaarli/issues/134
Products affected by CVE-2013-7351
-
cpe:2.3:a:shaarli_project:shaarli:-